Security researchers have discovered a huge amount of data containing information about millions of Facebook users, left available for anyone to access - no password required.
The culprits? Third-party developers.
In its ransomware response, Norsk Hydro is an example for us all
Itâs been over two weeks now since Norsk Hydro, one of the worldâs largest producers of aluminium, was hit by a ransomware attack that hit 160 of its plants worldwide, forcing many of its sites to switch to manual operations.
And theyâre handling things really rather wellâ¦
SPONSORWhy real-time intelligence matters for managing third-party risk
Many thanks to the great folks at Recorded Future, who have sponsored my writing for the last week.
As leading companies in every industry today are undergoing digital transformation, the lines are blurring between any one organization and its partners, suppliers, vendors, and other third parties.
In this new report, ESG examines how these business relationships can introduce new risks that need to be identified and managed âas if these third parties were part of the enterprise itself.â
Download your copy now of âThird-Party Risk: Why Real-Time Intelligence Mattersâ
About Recorded Future
Recorded Future delivers the only complete threat intelligence solution powered by patented machine learning to lower risk. We empower organizations to reveal unknown threats before they impact business, and enable teams to respond to alerts 10 times faster. To supercharge the efforts of security teams, our technology automatically collects and analyzes intelligence from technical, open web, and dark web sources and aggregates customer-proprietary data.
Recorded Future delivers more context than threat feeds, updates in real time so intelligence stays relevant, and centralizes information ready for human analysis, collaboration, and integration with security technologies. 91 percent of the Fortune 100 use Recorded Future.
If youâre interested in sponsoring my site for a week, and reaching an IT-savvy audience that cares about computer security, you can find more information here.
Terroristâs mainfesto used to spread disk-wiping malware
Following mass-shooting in New Zealand, someone has taken a copy of the terroristâs Word document and weaponised it to download malicious code from the internet.
Office Depot fined millions for tricking customers into believing their PCs were infected with malware
Office Depot, and its partner Support.com, have been fined $35 million for using the PC Health Check tune-up service to dupe people into buying unnecessary computer repair and technical services.
Read more in my article on the Hot for Security blog.
PODCASTSmashing Security #121: Hijacked motel rooms, ASUS PCs, and leaky apps
An app leaking private conversations and intimate photographs is ignoring requests to fix the problem, hackers poison a security update sent to ASUS PCs, and how to protect your privacy in motel rooms.
All this and much more is discussed in the latest edition of the award-winning âSmashing Securityâ podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.
Asus pushes out urgent security update after its own automatic Live Update tool was hacked
Taiwan-based technology giant Asus is advising concerned customers to run a newly-created diagnostic tool on their Windows computers after hackers pushed out malware to what some security researchers have estimated to be as many as one million PCs using Asusâs own Live Update software tool.
Read more in my article on the Tripwire State of Security blog.
A PSA for twits on Twitter
Twitter users have been warned not to fall for a prank that claimed their user interface would change colour if they told the service they were born in 2007, after a wave of users locked themselves out of their accounts for being underage.
Hackers poison Asus software updates, may have infected one million PCs
Hundreds of thousands of Asus PCs may have been infected with malware installed by Asusâs own automatic Live Update tool.
DLA Piper and its insurers clash over multi-million NotPetya payout
Multinational law firm was hit in the crossfire as Russia-backed ransomware spread, and Hiscox is reportedly declining to pay up citing an âact of warâ.
Popular family tracking app exposed real-time location data onto the internet â no password required
More than 238,000 individuals users have had their familyâs real-time location exposed for weeks on end after an app developer left sensitive data exposed on the internet, without a password.
Read more in my article on the Hot for Security blog.
Some 2000 Facebook staff had access to millions of Facebook usersâ passwords⦠stored in plaintext
Stretching back as far as 2012, Facebook has been storing the passwords of hundreds of millions of users unencrypted, in plaintext.
And those passwords were searchable by Facebook staffâ¦
Google and Facebook scammed out of $123 million by man posing as hardware vendor
Even the most tech savvy companies in the world can fall for business email compromise.
A Lithuanian man has this week pleaded guilty to tricking Google and Facebook into transferring over $100 million into a bank account under his control after posing as a company that provided the internet giants with hardware for their data centers.
Read more in my article on the Tripwire State of Security blog.
PODCASTSmashing Security #120: Silk Road with Deliveroo
Online drug dealers get busted due to poor OPSEC! People are still failing to wipe their USB sticks properly! A potential presidential candidate is outed as a former hacker! Flat Earthers! Pi! Empathy!
All this and much more is discussed in the latest edition of the award-winning âSmashing Securityâ podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.
Hydro working hard to recover following ransomware attack
You canât help but get the feeling that this was a highly-organised extortion attempt against Norsk Hydro.
Aluminium plants hit by cyber-attack, global company turns to manual operations
Norsk Hydro, one of the worldâs largest producers of aluminium, says that it is battling an âextensive cyber-attackâ that first hit its systems on Monday evening and then escalated overnight.
Read more in my article on the Hot for Security blog.
